MurrayToby

Non-delegatable authorities in capability systems

MurrayToby, GroveDuncan, 2008 .

Towards Provable Timing-Channel Prevention

HeiserGernot, KleinGerwin, MurrayToby, 2020 .

File systems deserve verification too

HeiserGernot, KellerGabriele, KleinGerwin, 2014 .

Formally verified software in the real world

HeiserGernot, KleinGerwin, MurrayToby, 2018 .

Comprehensive formal verification of an OS microkernel

HeiserGernot, KleinGerwin, MurrayToby, 2014 .